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ABSTRACT 



The calculation of the exact reliability of complex systems is a 
difficult and tedious task. Consequently simple approximating techniques 
have great practical value. 

The hazard transform of a system is an invertible transformation of 
its reliability function which is convenient and useful in both applied 
and theoretical reliability work. A simple calculus for finding an 
approximate hazard transform for systems formed by series and parallel 
combinations of components is extended so that it can be used for any 
coherent system. The extended calculus is shown to lead to conservative 
approximations . 

A first order version of the extended calculus is also discussed. 
This method of approximation is even more simple to use, but is not always 
conservative. Examples of its application indicate that it is capable of 
giving quite accurate results. 



This research was partially supported by the Office of Naval Research (ONR 
042-300) under Purchase Order 2-0251 and the Strategic Systems Project 
Office (TA 82415) under Work Request 3-5001, both to the Naval Postgraduate 
School . 
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1 . INTRODUCTION 



Suppose that two components perform independently and have probabil- 
ities p^ and p^ of doing so successfully, i.e. of functioning . If 
the components constitute a series system, i.e. a system that functions 
only if both of its components function, then the probability that the 
system functions is 

P = h(p 1 ,p 2 ) = P 1 P 2 » 

where hCp^jp^) is a reliability function. With due regard for the 
limitations imposed by assuming that the components perform indepen- 
dently, the reliability function of a two component series system is a 
convenient summary of its stochastic properties. The convenience stems 
from the variety of interpretations that can be attached to the term 
functioning, for the components, and consequently for the system. For 
example, p^ and p^ could be component success probabilities for a 
mission that develops in time, or one of several types of component avail- 
abilities. In each case p, as computed from hCp^jp^), will be the 
corresponding quantity for the system. The reliability functions of 
more complex systems have the same utility. 

The quantities u^ = - tog P^> u 2 = P2 are t * le component hazards 

and u = - tog p is the system hazard. For the two component series 
system 



u i + 



2 ’ 



u 



n(u 1 > u 2 ) 



2 



where n(u^,u 2 ) is a hazard transform . The hazard transform of a system 
is equivalent to its reliability function, but for many purposes repre- 
sents its properties in an even more convenient way. Examples of the 
application of hazard transforms are given in Esary, Marshall and Proschan 
( 1970 ) . 

For the two component parallel system, i.e. the system that functions 
if either of its components functions, the reliability function is 

h(P 1 ,P 2 ) = 1 - (1-pp (1-P 2 ) , 

and the hazard transform is 

" U 1 “ u 2 

h( u l> u 2 ) = ~^°G {1 “ (l~ e 1 )(l~e Z )}. 

The contrast in complexity between the series and parallel hazard trans- 
forms is apparent. However, for small component hazards u^,u 2 , i.e. for 
large component success probabilities p^,p 2 , 

n( V u 2 ) - Ul u 2 

is a good approximation for the parallel system, and is conservative in 
that it overestimates system hazard and thus underestimates system relia- 
bility. 

An approximate hazard transform n* can be defined by: 

n*(u 1 ,u 2 ) = n(u 1 ,u 2 ) = u^ + u 2 for two components in series, 

rj*(u^,u 2 ) = u i u 2 ^ or two cora P onent:s i n parallel. 

These definitions lead to a simple calculus for finding an approximate 
hazard transform for systems that can be formed using series and parallel 
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combinations of components. For example, the system with the reliability 
block diagram shown in Figure 1 has, following the above rules of compu- 
tation, the approximate hazard transform 

(1.1) n*(u 1? . . . ,u 5 ) = ( U 1 U 2 + u 3 )(u 4 + u^) 




FIGURE 1 

Rubinstein (1961) introduced this calculus as a step in deriving life 
test procedures for large systems, and considered (1965) more refined 
approximations for parallel and some other systems. The calculus is 
employed in the GUIDE MANUAL FOR RELIABILITY MEASUREMENT issued by the 
Navy Special Projects Office. 

Our purpose is to note a simple extension of the calculus to systems 
that cannot be formed using just series and parallel combinations of com- 
ponents, e.g. the system with the block diagram shown in Figure 2, and 
to show that the extended calculus is conservative . 
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FIGURE 2 

We also comment on a first order version of the extended calculus 
which is not necessarily conservative, but which gains in simplicity and 
can give quite accurate results. 

2. AN APPROXIMATE HAZARD TRANSFORM 

The approximate hazard transform we consider can be defined for the 
class of coherent systems. Systems describable by a reliability block 
diagram or by a fault tree using "and” and "or lf gates are coherent. 
Alternately, the performance of the components in a system can be indi- 
cated by Bernoulli random variables where X^ = 1 if the 

i— component functions, X_^ = 0 if the i— component fails to function, 
and the performance of the system can be indicated by a structure function 
<j )(X) = <j)(X^, . . . ,X^) , where <|)(X) = 1 if the system functions, (X) = 0 
if the system fails to function. The system is coherent if <p is 
increasing in each of its coordinates and <j)(l,...,l) = 1, <j>(0,...,0) = 0, 
conditions which are clearly satisfied by systems described by block dia- 



grams or fault trees. 
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If the components in a system perform independently, i,e. if 
X ,...,X are independent, then the probability p = P[cf)(X) = 1] that 
the system functions can be computed from the marginal probabilities 
= P[X_^ =1], i = l,...,n, that the components function. If not, 
then p depends on the joint distribution of The reliability 

function h of a system describes the relationship between p and p^,...,p i 
in the case of independence. It is formally defined by 

h(£) = h(p 1 ,...,p n ) = p [ 4) ( X) = 1], 

where X^,...,X n are independent and P[X^ = 1] = p , 0 < p^ < 1, 

i = 1, . . . ,n. 

It is common in the assurance disciplines to work with hazards rather 
than with probabilities. Examples are the M parts count” method in which 
component hazards are added to obtain a system hazard (in effect assuming 
that the system is series) , and the practice of adding hazards over phases 
of a mission to obtain a mission hazard. 

-u. 

Recall that the component hazards are u^ = - log p so that p^ = e , 

i = l,...,n, and the system hazard is u = -log p = -log h(g) . A hazard 

is zero when the probability of functioning is one and increases to infinity 

as the probability of functioning decreases to zero, which to some extent 

makes the name appropriate. The hazard transform n of the system 

relates u to u, ,...,u and is defined by 
I n 

~ U 1 ~ U n 

n(u) = n(u l5 ...,u n ) = -log h(j>) = -log h(e ), 

where u^^O, i = l,...n. Knowing the hazard transform of a system is 
equivalent to knowing its reliability function since 
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-n(u) -r\(-log p , f . . ,-log p ) 

h(p) = e = e 

The assumption that components perform independently is implicit in the 
definition of a hazard transform, just as it is in the definition of a 
reliability function. 

The approximate hazard transform we consider can be conveniently 
introduced by first considering an approximation for the hazard transform 
of a parallel system and then extending the approximation to an arbitrary 
coherent system, using a representation of the system as a series of 
parallel subsystems related to its "minimal cuts. 11 

The n component 'pavdlteZ system functions if at least one of its 
components functions, so that its structure function is 

<f>(x) = 1 - Tf.^d-x.), 

and its reliability function is 

h(p) = PU(X) = 1] = 1 - P[X L = 0,...,X n = 0] 

= 1 - TTi^tx. = o] = i TT^a-Pi). 

Its hazard transform is 

-u -u -u. 

(2.1) n(u) = -log h (e , ...,e n ) = -log [1 - TT^id-e ; ] • 

An approximate hazard transform for the n component parallel system is 

(2.2) n*(u) = > 1} ^ 0, 

where 0 = (0,...,0) and u > 0 means u_^>0, i=l,...,n. The 
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approximation is based on the power series expansion for n(u)- 

The following lemma shows, for parallel systems, that: (a) the exact 

and approximate hazard transforms agree for perfectly reliable compo- 
nents, (b) the approximate hazard transform is conservative, i.e. 
it indicates greater hazard (less reliability) than the exact transform, 
and (c) the accuracy of the approximate hazard transform decreases as 
the component hazards increase. The lemma extends an observation of 
Rubinstein (1965, Appendix B). 

Lemma 2.1 For an n component parallel system the following compari- 
sons exist between the hazard transform n and the approximate hazard 
transform n* • 



(a) 


n*(0) 


= n(0) = o. 


(b) 


n*(u) 


- n(u) , u > 0. 



(c) n*(u) - n(u) is increasing with respect to u^, i = l,...,n. 

Proof . It is immediate that n*(0) = 0 and that n(0) = -log 1 = 0. 

Thus (a) holds. That (b) holds follows from (a) and (c) . To verify (c) 
note that 



-^{n*(u) - n(u) } = TTj^i - 



-u. -u. 

e 1 TTj»i (1 ~ e J) 

i - Ti ) : 1 u-<f Uj ) 



-u. -U. 

Since u. £ 1-e so that TT. ^.u. ^ Jf. . (1-e ~') > and 

j 11 J *1 J J 



-u. -u. 



i - TT~j =! e J ) - e 1 ( the reliability of a parallel system is not 
less than the reliability of one of its components) , it follows that 
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d (n*(u) - n(u) } ^ 0. Thus (c) holds, D 

3u. 

1 

The assumption that the components perform independently is crucial 
to the comparisons of Lemma 2.1, as is shown by the following example. 

Example 2.2 Suppose the components in a two component parallel system 
perform dependently in the strong, positive sense that = X, 

i t e. if one component fails, so does the other. Then <j)(X^,X 2 ) = 

1 - (1-Xj) (1-X 2 ) = X, and 

p = P [cj>(X 1 ,X 2 ) = 1] = P[X= 1] = Pl = p 2 , 

where p^ = P[X^ = 1] and p 2 = P[X 2 = 1]. The system hazard is 
u = - log p and the component hazards are u^ = - log p^ = u, u 2 = 

2 

- log p 2 = u. If one now tries to approximate r\ = u by n* = u^u 2 = u > 
only part (a) of Lemma 2.1 remains valid. In particular if 0 < u < 1, 
then n*<n, i.e. the approximation is not conservative. □ 

In a coherent system those combinations of components whose failure 
is just enough to cause a system failure are called minimal cuts. More 
precisely, a set of components K is a cut if X_^ = 0, i e K and 
X^ = 1, i i K implies (})(X) = 0, and K is a minimal cut if no proper 
subset of K is also a cut. For example, the system shown in Figure 1 
has the four minimal cuts 

K x = {1,2,4}, K 2 = {1,2,5}, K 3 = {3,4}, K 4 = {3,5}. 



and the system shown in Figure 2 also has four minimal cuts, but these are 
K 1 = {1,2}, K 2 = {1,3,5}, K 3 = {2,3,4}, K 4 = {4,5}. 
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We will denote the minimal cuts of a coherent system by 
where k is the number of minimal cuts. 

Any coherent system can be represented in terms of its minimal cuts 
by forming, for each minimal cut, a parallel subsystem from the compo- 
nents in the cut, and then connecting the parallel subsystems in series* 
Formally the system structure function <J> satisfies 

(2.3) <Kx) = TTjl^jQP , 

where (f).(X) = 1 TTieK. (1— X_^) , j = l,...,k, are the structure func- 

j 16 j 1 

tions of the parallel subsystems corresponding to the minimal cuts of 
the system. More graphically, the minimal cuts of a coherent system 
determine a particular way of drawing its block diagram. For example, 
the block diagram shown in Figure 3 is equivalent to the block diagram 
shown in Figure 1, and the block diagram of Figure 4 is equivalent to 
the block diagram of Figure 2. 




FIGURE 3 
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FIGURE 4 

An important thing to note about the minimal cut representation of 
a coherent system is that the same component can appear in several mini- 
mal cuts. So even though the components perform independently, the 
parallel subsystems corresponding to the minimal cuts in general do not. 
Thus, if h.(p) = 1 - ]"[*. (1-p.), j = 1, , , , ,k, are the reliability 

i ~ i£ lx . i 

j 

functions of the parallel subsystems, then the relationship h(p) = 

^h . (p) which would hold if the parallel systems performed independently 
is not necessarily valid. What is true is that 



(2.4) h(p) > TTAMP> > 3 - P - 

~ J~ ± J ~ ~ 



(Esary and Proschan, 1963, Theorem 4.1). The function 



(2.5) h MC (p) = TTj^yp) , 0 < £ < 1, 

is the minimal cut lower bound on the exact reliability function h. 



Recall that ri(u) = - log h(j>) is the exact system hazard transform. 
Define the minimal cut upper bound on n by 

n MC (ii) = ~ l ° g h MC^ = ^j=l n j (ii) ’ ~ 



( 2 . 6 ) 
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where t\ (u) “ - log h^ (p) , j = l,.,.,k, The bound is obtained by 
finding the exact hazard transform for each of the parallel subsystems 
in the minimal cut representation for the system and adding these to- 
gether as if the parallel systems performed independently. The following 
lemma is largely a restatement of inequality (2.4), 

Lemma 2.3 For a coherent system the following comparisons exist between 
the hazard transform n and the minimal cut upper bound on tv 



(a) 


n MC<S> 


= n(0) = 0. 


(b) 


n MC^ 


- n(u), u 



Proof. That = 0 follows from (2.6) and part (a) of Lemma 2.1. 

If u = 0, then p » (e ^,...,e ^) = 1, and n (0) = - log h (1) = -log 1=0. 
Thus (a) holds. That (b) holds follows from inequality (2.4), since 

n Mc(~) = ~^° 9 h MC^ ~ = n(u). □ 

Remark 2.4 In contrast with part (b) of Lemma 2.1, part (b) of Lemma 2.3 
remains valid, in essence, when component performances are positively 
dependent in a sense called "association" (Esary, Proschan, and Walkup, 

1967 and Esary -Proschan, 1970) . However, making use of this fact in the 
calculation of conservative approximate hazard transforms requires finding 
suitable modifications, under whatever degree of association is specified, 
to the approximation (2.2) for parallel systems. □ 

The approximate hazard transform that we consider for an arbitrary 
coherent system with minimal cuts K^,...,K^ is 

(2.7) n*(u) = Jj^n^Cu), u > 0, 
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. l 



u. > j = The approximation is obtained 



by finding the approximate hazard transform for each of the parallel sub- 
systems in the minimal cut representation for the system and then adding 
the results as if the parallel systems performed independently. Thus 
approximations at two different levels are involved. For example, the 
approximate hazard transform for the system of Figures 1 and 3 is 



The following theorem shows that the approximate hazard transform for 
a coherent system is: (a) exact for perfectly reliable components, and 

(b) conservative. 

Theorem 2.5 For a coherent system the following comparisons exist between 
the hazard transform the minimal cut upper bound on the hazard 

transform 3 and the approximate hazard transform n*: 



Proof . That n*(0) = 0 is immediate from (2.7). That = = ® 

is part (a) of Lemma 2.3. Thus (a) holds. To show (b) recall that 

> rj(u) is part (b) of Lemma 2.3, and note that from (2.6), (2.7), 
and part (b) of Lemma 2.1 



( 2 . 8 ) 




and for the system of Figures 2 and 4 




(a) n*(0) - n MC (Q) = n(0) = 0. 

(b) n*(u) ^ n MC (u) s n(u), u > o. 




Thus (b) holds. □ 
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3. A CALCULUS FOR APPROXIMATE HAZARD TRANSFORMS 

One of the most attractive features of the approximate hazard trans- 
form (2.7) is the simple calculus by which it can be computed for certain 
important categories of coherent systems, notably the class of systems 
that can be formed by successive series and parallel combinations of sub- 
systems with non-overlapping sets of components, i.e. the class of simple 
systems considered by Lomnicki (1973). The essential ideas of this cal- 
culus are described in Section 1, and its application to the system of 
Figure 1 is illustrated. Note that the approximate hazard transform for 
that system given in (1.1) agrees with the approximate hazard transform 
given in (2.8). 

For the purposes of this section we will denote a system by a couple 
( C , 4>) , where C is the set of components used in forming the system (from 
the mathematical viewpoint C is a set of indices i used to label the 
components) and <|> is the structure function of the system. We will be 
considering coherent systems (C,<f>) formed from two coherent subsystems, 
(Cf,^!) and this situation C = C^uC^, i.e. the system com- 

ponent set consists of all the components appearing in either subsystem. 
The subsystems have non-overlapping or disjoint component sets if 
^i n ^2 = where 0 is the empty set, i.e. no component appears in both 
subsystems. The reason for being interested in subsystems with disjoint 
component sets is that if all the components in C perform independently 
and C ±> C 2 are disjoints then the subsystems perform independently . 

The system (C , 4>) is a series combination of the subsystems (C^,^) 
and (C 2 4> 2 ) if 
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(3.1) 4> (X) = <J>^ (X) 4>2 (X) , for all realizations of X, 

where X is the vector of component performance indicators X , ieC. 

If and are disjoint, then depends only on those X. such 

that ieC^, and <J> 2 depends only on those such that icC^. Simi- 
larly, (C , 4>) is a parallel combination of and ^2^2} ^ 

(3.2) 4>(X) = 1 - (l-^QC) }{1-4> 2 (X) }, for all realizations of X. 

It is easy to check that a series or parallel combination of coherent 
subsystems is a coherent system. Graphically, these definitions corres- 
pond to being able to display the block diagram for the system as a series 
or parallel combination of the block diagrams for the subsystems. The 
following proposition describes how approximate hazard transforms can be 
computed, for series and parallel combinations of subsystems with disjoint 
component sets, to obtain results that agree with (2.7). 



Proposition 3.1 Suppose a coherent system (C,<{>) is a combination of 
the coherent subsystems (C 2 ,<J> 2 ) w ^ ere C ]_ c 2 are 

disjoint . Let n* be the approximate hazard transform for (C,<p) and 
n*l ,n*2 be the approximate hazard transforms for (C^,^) and 



Then for all 


u — 0 • 






(a) 


n*(u) 


i— 1 

* 

fT 

II 


+ n* 2 (ii) 5 the combination is series. 


(b) 


n*(u) 


= n^Cu) 


r^Cu), if the combination is parallel. 



Proof . Suppose (C^,^) has the minimal cuts K^,...,K^ 
has the minimal cuts K ’21 , ** ,,K 2k * 

(a) If the combination is series, then since and 



and (C 2 ,<}> 2 ) 



are disjoint, 
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(C, <f>) has k = k^+k^ minimal cuts, namely 



K i = K n— >Y 



! K lk 1 > \+1 K 21>""\ i+k2 ~ K 2 k 2 * 



From (2.7) 



n*(u) - I^TT^ u. = Z*lT l£K u t + l2 K u± 

J 2 z Z J2 

= n* 1 (u) + n* 2 (u) , 



so (a) holds. 

(b) If the combination is parallel, then since and are dis- 

joint, (C,ij>) has k = k k minimal cuts, namely all K. = K, . uK„ . where 

12 J IJ-l 2j 2 



. ,k^ and 


j 2 = 1> 

k- 


• • • 5 ^2 ' 

k _ 


ieK. U i 

J 




1 2 TT 
h 2 = i' 'J 



uK U i 
L 2j 2 



k i S 

= L =i L =iTT ieK u i*TT ieK 

J 1 1 J 2 1 xeK lj :L 1 1£K 2j 2 1 

= ^'=lTT i€Ki . u i * Ij^iTT i€K u ± = n^C^n^Cu) , 



so (b) holds. □ 

It is clear that if a system is formed by a sequence of series or paral- 
lel combinations of modules, i.e. subsystems with non -overlapping component 
sets, then parts (a) and (b) of Proposition 3.1 can be applied in the same 
sequence to evaluate its approximate hazard transform. Thus the proposition 
defines a calculus which is applicable to simple systems. 



Remark 3.2 Proposition 3.2 can be extended to show that whenever a module 
(cf. Birnbaum and Esary, 1965) occurs in a coherent system, the approximate 
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transform for the system can be found by first finding the approximate 
hazard transform for the module and then proceeding as if the module were 
a component in the larger system with the hazard given by its approximate 
transform. □ 

A specialized application of the approximate hazard transform is found 
in the GUIDE MANUAL FOR RELIABILITY MEASUREMENT (Section 3.1.6). All com- 
ponents are assumed to have exponential life distributions, i.e. for a 

-X.t 

mission of duration t, p_^ = e , i = l,...,n. The mission length is 

taken as the unit of time measurement, and the component failure rates X ^ 

are scaled accordingly. In this way the mission reliability of a component 

-X. 

has the simple form p^ = e . The component mission hazard is then 

u. = X. . Under these conventions the calculus used in the manual is a 
1 l 

special case of the approximate hazard transform calculus. 



4. THE FIRST-ORDER APPROXIMATION 
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The approximate hazard transform n* is always conservative. In this 
section we describe a first-order approximate hazard transform n^* which 
is easier to compute than r)*> sometimes more accurate than rj*, but is 
not always conservative. 

The approximate hazard transform n* is based on all minimal cuts of 
the system, i.e. n*> computed from (2.7), is the sum of the products of 
component hazards over each minimal cut. The first-order approximation is 
computed in a similar manner but using only the minimal cuts having the small- 
est number of components. The procedure is best illustrated by an example. 

Recall that the system shown in Figures 2 and 4 has four minimal cuts. 

Two minimal cuts, = {1,2} and = {4,5}, contain two components. 

The other cuts contain more than two components. The first-order approxi- 
mation for this system is based only on cuts and , i.e. 

(4.1) n 1 (u 1 ,. . . ,u 5 ) = u 1 u 2 +u 4 u 5* 

The procedure for the first-order approximation, then, is to identify 
the smallest minimal cuts and to sum the products of component hazards over 
those cuts. By ignoring the larger minimal cuts, the first-order approxi- 
mation tends to "correct" for the conservative error in the approximate 
hazard transform. Of course the M correction*' may be too large, i.e. the 
first-order approximation is not always conservative. 

If a component does not appear in any of the smallest minimal cuts, e.g. 
component 3 of Figures 2 and 4, then the first-order approximation implicitly 
treats the component as being perfectly reliable. If the reliability of such 
components is no less than the reliability of the components in the smallest 
minimal cuts, then the first-order approximation usually gives rather good 



results . 
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5. NUMERICAL COMPARISONS 



In this section we compute system hazard using the approximate hazard 
transform n* and the first-order approximation n\ and compare the re- 
sults with the true system hazard n for selected examples. The compari- 
son is shown in terms of "percent error" where 

% error - l". 1 ° r . ■ n ’ >> ~ n x 100. 



In the examples, and in the experience of the authors with similar 
examples involving small systems, the accuracy of the approximations usu- 
ally decreases with decreasing component reliabilities. If the reliabil- 
ities are greater than 0.9, the approximations usually are in error by less 
than 20% . 

The formulas for the true system hazard are not exhibited in the 
examples. Some appreciation of the need for approximations can be gained 
by working them out. The motivation for the approximations discussed here 
is not only that numerical calculations are less tedious, but also that a 
formula for numerical calculations, or other purposes, can be derived with 
relative ease. 



Example 5.1 Suppose the components in the system of Figures 1 and 3 have 

independent times to failure, exponentially distributed with parameters 

-A . t 

A^ , . . . , A^- . Then for a mission of duration t, p^ = e and u^ = A^t, 

i = 1,.,.,5. The approximations to the system hazard for the mission are 

1 2 
n = U 3 U 4 +U 3 U 5 = A^tA^t + ^3 t *5 t = ’ 



and 
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n* = (A A t + A»t) ( A . t + At) 

1 Z 3 4 5 

[cf. (1.1)]. Some numerical comparisons for this system are tabulated 
below. 



Case 1 



A, = 



X 2 X 3 



= A, = 



A 5 = 0.10 



Percent Error 



t 




n 


1 

n 


n* 












0.2 




.0008 


1.2 


2.4 


0.4 




.0031 


2.2 


6.0 


0.6 




.0070 


3.3 


9.5 


0.8 




.0122 


4.5 


12.8 


1.0 




.0189 


5.8 


16.4 


Case 2 


A l = 


A 2 = A 3 = 0.20, 


X 4= X 5 


= 0.10 


t_ 




n. 


Percent Error 
n 1 n* 












0.2 




.0016 


— 


4.4 


0.4 




.0064 


0.8 


8.8 


0.6 




.0142 


1.6 


. 13.8 


0.8 




.0249 


2.7 


19.1 


1.0 




.0385 


4.0 


24.7 


In Case 2 , 


when 


t = 1.0, p. = 0. 

1 


82, i = 


1,2,3. This low component 


reliability 


adversely affects the 


accuracy 


of the approximate hazard 



transform. □ 



Example 5.2 Let components 1,2, 3, 4 in the system of Figures 2 and 4 have 
independent times to failure with the distributions shown below. Let com- 
ponent 3 be a H one-shot" device which, independently, either functions 
for a mission of any duration or is failed from the outset. 
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Component 

1 

2 

3 

4 

5 



Distribution 

EXPONENTIAL 

EXPONENTIAL 

BERNOULLI 

WEIBULL 

WE I BULL 



For a mission of duration t 



Component Hazards 
for a Mission of 
Parameters Duration t 



X 

X 

P 3 

p,a 

P,a 



At 

Xt 

-log p, 
a 



pt 

Pt 



a 



1 

n 



,22, 2 2a 

At + p t 



[cf. (4.1)], and 

. ,2 2 . \ oi _ct+l , 2 2a 

n* = A t - ( log p^) 2Apt + p t 



[cf. (2.9)]. Some numerical comparisons are tabulated below. 



Case 1 


A = 0.10, p 3 = 


0,90, y = 0.10 


, a = 






Percent 


Error 


t_ 


n 


i 

n_ 


H* 


0.2 


.0004 


-1.5 


2.4 


0.4 


.0019 


- 2.7 


4.3 


0.6 


.0050 


-2.5 


6.5 


0.8 


.0106 


-1.1 


9.1 


1.0 


.0197 


+1.5 


12.2 



Case 2 


A = 0.10, p 3 = 0.95, 


p = 0.15 


, a = 






Percent 


Error 


_t 


21 


1 

21 


H* 


0.2 


.0006 


0.1 


2.5 


0.4 


.0030 


0.7 


4.8 


0.6 


.0081 


2.3 


7.4 


0.8 


.0179 


5.2 


10.8 


1.0 


.0342 


9.5 


15.2 



21 



In Case 1 the first-order approximation is not conservative for t < 0.8, 
i.e. system reliability is estimated . Note that the component ignored 

by the approximation, component 3, is the least reliable component in 
the system for t < 1.0. □ 
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